Vulnerabilities > CVE-2022-38734 - Unspecified vulnerability in Netapp Storagegrid

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

netapp

NVD

Published: 2023-03-02

Updated: 2023-03-10

Summary

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to to a crash of the Local Distribution Router (LDR) service.

Vulnerable Configurations

Part	Description	Count
Application	Netapp Netapp Storagegrid - Netapp Storagegrid 7.5.5 Netapp Storagegrid 8.0.6 Netapp Storagegrid 8.1.3 Netapp Storagegrid 8.5.0 Netapp Storagegrid 8.5.1 Netapp Storagegrid 8.5.3 Netapp Storagegrid 9.0.0 Netapp Storagegrid 9.0.1 Netapp Storagegrid 9.0.2 Netapp Storagegrid 9.0.4 Netapp Storagegrid 10.0.0 Netapp Storagegrid 11.1.1.10 Netapp Storagegrid 11.1.1.11 Netapp Storagegrid 11.2 Netapp Storagegrid 11.2.0.5 Netapp Storagegrid 11.2.0.6 Netapp Storagegrid 11.2.0.7 Netapp Storagegrid 11.2.0.8 Netapp Storagegrid 11.3 Netapp Storagegrid 11.3.0.1 Netapp Storagegrid 11.3.0.3 Netapp Storagegrid 11.3.0.4 Netapp Storagegrid 11.3.0.5 Netapp Storagegrid 11.3.0.6 Netapp Storagegrid 11.3.0.8 Netapp Storagegrid 11.3.0.10 Netapp Storagegrid 11.3.0.11 Netapp Storagegrid 11.3.0.12 Netapp Storagegrid 11.4.0 Netapp Storagegrid 11.4.0.1 Netapp Storagegrid 11.4.0.2 Netapp Storagegrid 11.4.0.3 Netapp Storagegrid 11.4.0.4 Netapp Storagegrid 11.4.0.5 Netapp Storagegrid 11.4.0.6 Netapp Storagegrid 11.5.0 Netapp Storagegrid 11.5.0.1 Netapp Storagegrid 11.5.0.2 Netapp Storagegrid 11.5.0.3 Netapp Storagegrid 11.5.0.4 Netapp Storagegrid 11.5.0.5 Netapp Storagegrid 11.6.0	43

References

https://security.netapp.com/advisory/ntap-20230228-0001/